CVE-2023-2712

CRITICAL 9.8CVE-2023-2712 · Published 20/05/2023 · updated 17/06/2026

In short

CVE-2023-2712 is a CRITICAL (CVSS 9.8) vulnerability affecting rental module (rental module project).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.4% of all vulnerabilities.
Fix: update to 23.05.15 or later.

Package	Affected versions	Patched versions
rental module rental_module_project	`< 23.05.15`	`23.05.15`

Description

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0276
usom.gov.tr/bildirim/tr-23-0276 · Third Party Advisory

More vulnerabilities in rental module

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free